CVE-2022-33035

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

Design/Logic Flaw

XLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges...

CVE-2022-33035

CVE-2022-33035 affects NetSarang XLPD v7.0.0094 and earlier. The root cause is an unquoted service path that can be exploited by a local attacker to start a process with elevated privileges, resulting in local privilege escalation. Multiple sources in the connected set corroborate the same descri...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache Tomcat

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Apache Tomcat. Vulnerability Details CVEID: CVE-2022-23181 DESCRIPTION: Apache Tomcat could allow a local authenticated attacker to gain elevated privileges on the system, caused by a time of check, time of u...

The vulnerability of NTFS file system descriptors for the FUSE NTFS-3G module allows a attacker to execute arbitrary code with elevated privileges.

The vulnerability of NTFS file system descriptors for the FUSE NTFS-3G module relates to reading and writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially crafted request...

Microsoft Edge’s vulnerability, related to insufficient validation of input data, allows attackers to execute arbitrary code with elevated privileges.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with elevated privileges...

Microsoft Edge’s vulnerability, related to insufficient validation of input data, allows attackers to execute arbitrary code with elevated privileges.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with elevated privileges...

The vulnerability of the check_file_record function in the NTFS file system, which allows a malicious actor to execute arbitrary code with elevated privileges through the FUSE NTFS-3G module.

The vulnerability of the checkfilerecord function in the NTFS file system relates to buffer overflow in dynamic memory. Exploitation of this vulnerability allows a remote attacker to execute arbitrary code with elevated privileges using a specially crafted NTFS file system...

The vulnerability of the `fuse_lib_readdir` function in the `libfuse-lite` library of the NTFS file system, which allows a attacker to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.

The vulnerability of the fuselibreaddir function in the libfuse-lite library of the NTFS file system for the FUSE NTFS-3G module is related to a numerical value loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a...

The vulnerability of the `fuse_kern_mount` function in the `libfuse-lite` library, implemented in the NTFS file system, allows a malicious actor to execute arbitrary code with elevated privileges.

The vulnerability of the fusekernmount function in the libfuse-lite library, implemented in the NTFS file system, affects the FUSE module NTFS-3G. This vulnerability involves returning an incorrect process status code. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

The vulnerability of Microsoft’s Windows Remote Credential Guard system allows attackers to circumvent security restrictions and enhance their privileges.

The vulnerability of Microsoft’s Windows Remote Credential Guard security feature is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

CVE-2022-1741

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1741

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1744

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

Code injection

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

Code injection

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1741 2.2.3 HIDDEN FUNCTIONALITY CWE-912

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code...

CVE-2022-1744 2.2.6 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code...

CVE-2022-1517

Illumina Local Run Manager (LRM) software, affected versions 1.3–3.1, contains CVE-2022-1517 (execution with unnecessary privileges). An unauthenticated attacker could upload and execute code remotely at the OS level, potentially tampering with settings, software, data, or APIs and interacting ov...